Until now that access never ended — someone had to remember to remove it by hand. You can now give a global user access that stops working on a date you pick, for any of the instances you are granting. After that date, signing in on that instance is refused with a clear message, and everything else about the account stays exactly as it was.
Contents
1. Before You Start
2. Give a New Global User Access That Expires
3. See Who Has a Time Limit
4. Change, Extend or Remove a Time Limit
5. What the Person Sees When the Date Has Passed
6. How the Instance List Works
7. Frequently Asked Questions
1. Before You Start
You will need:
A Super Admin sign-in on the admin instance (the instance where global users are created). The list of customer instances this person should be able to reach.
The date their access should end, if you want one. Leaving it off keeps access standing, exactly as before.
Access requirements: the Global Users and Global IQ Users screens are only available to a Super Admin on the admin instance. If you do not see them, you are either signed in to a customer instance or your account is not a Super Admin.
If you can see the Global Users screen but the Time-limited access switch does not appear, your instance has not picked up the update yet — contact Dazos support and reference CRM-3817.
2. Give a New Global User Access That Expires
Start creating the global user the way you always have: fill in the name, email, password and role, tick the global-user option, and choose Include User/s or Exclude User/s with the organizations you want.
Then turn on Time-limited access. A searchable instance list and a date appear.
Field | Description | Example |
Time-limited access | Off means standing access, exactly as before. On reveals the two fields below. | off by default |
Enterprise instances (time limit) | Search and pick the instances whose access should end. Only the instances this person is actually being given are listed. | localhost3(insightstx) |
Select all | Picks every instance in the list — useful when the list is long. | — |
Clear | Unpicks everything, leaving the access standing. | — |
Access expires | The last day they can sign in. Pre-filled with the coming Friday. | 18-09-2026 |
1. Pick the instances whose access should end. Leave the list empty if you want unlimited access everywhere.
2. Check the Access expires date and change it if you need a different day.
3. Click Save.
The instances are updated in the background, the same way global users have always been created — there is nothing else to run.
Tip: Access runs to the end of the day you pick, in your own time zone. Choosing Friday means the person can still sign in all day Friday and is refused from Saturday.
3. See Who Has a Time Limit
Open Global Users (or Global IQ Users). The list has an Access expiry column showing, for each person, which instances carry a limit and until when.
What you see | What it means |
Unlimited | No time limit anywhere — standing access, as before. |
instance: 2026-09-18 | Access to that instance ends at the end of that day. |
instance: 2026-09-13 (expired) | That date has passed; the person can no longer sign in on that instance. |
A person can have a limit on some instances and standing access on others — each line is one instance.
4. Change, Extend or Remove a Time Limit
Click the pencil (edit) icon next to the person on the Global Users screen.
The window opens showing what they have today: the switch is already on if they have a limit, with their instances picked and the date filled in.
1. To extend or shorten it — change the Access expires date and click Save.
2. To add or remove an instance — change Select Organization at the top. The instance list below follows immediately, so an instance you just added can be given the same limit right away.
3. To give them standing access again — turn Time-limited access off and click Save. The limit is removed from the instances and they can sign in normally.
Important: turning the switch off and saving removes the limit everywhere for that person. If you only want to lift it on one instance, leave the switch on and unpick that instance from the list instead.
5. What the Person Sees When the Date Has Passed
Their username and password stop working on that instance only. The sign-in page tells them why:
Tip: failed attempts of this kind are not counted against them, so nobody gets locked out by trying. Their access on other instances is unaffected, and their account is not deleted — extending the date lets them straight back in.
One thing to know: somebody who is already signed in when the date passes stays signed in until that session ends on its own. The limit applies to signing in.
6. How the Instance List Works
The Enterprise instances (time limit) list always shows exactly the instances the person will actually be given, so you can never set a limit on an instance they do not have. It follows your Include / Exclude choice:
Your choice | What the list shows |
Neither Include nor Exclude ticked | Every instance — this person is being given all of them. |
Include with organizations chosen | Only the organizations you chose. |
Exclude with organizations chosen | Every instance except the ones you chose. |
Change the choice and the list updates straight away, along with the line underneath telling you how many instances the person will receive.
7. Frequently Asked Questions
Q: What happens if I leave the date blank? No limit is saved and access stays standing, exactly as it did before this feature existed.
Q: Can different instances have different dates for the same person? One date applies to everything you pick in a single save. If you need different dates, save the first group, then edit again and pick the next group with its own date.
Q: Is the time zone mine or theirs? Yours, as the person setting it. Access runs to the end of the chosen day in your time zone.
Q: Does the limit delete their account when it expires? No. The account stays on the instance and simply cannot sign in. Extend the date and they are back in, with everything as they left it.
Q: Will they be warned before their access ends? Not currently — there are no reminder emails. They see the message when they next try to sign in.
Q: Does this apply to both the CRM and IQ? Yes. The Global Users screen covers the CRM and Global IQ Users covers IQ; both work the same way and both refuse an expired sign-in with the same message.
Q: Someone's access expired and they need it back right now — what is the fastest route? Edit them on the Global Users screen, set Access expires to a future date, and save. It reaches the instance on the next background run.
Q: Does any of this affect ordinary (non-global) users? No. The time-limit block only appears for global users, and it is off unless you turn it on.
Need Help?
If you run into issues:
1. Check the Access expiry column on the Global Users screen — it shows what the system currently believes, including "(expired)".
2. Open the person's edit window and confirm the switch, the instances and the date are what you expect, then save again.
3. Contact Dazos support with the person's username, the instance and the date you set, and reference CRM-3817.